$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa File: c39cca32-f395-3fe4-84da-62da6b8d2a29.roa (raw, json) Hash identifier: SxUhq4N6mjNgHz5C2aLDjGWkYg91eU4W5X6W+SkXXk0= Subject key identifier: 40:C4:0C:1A:AE:F1:E0:27:89:93:1E:08:FD:D3:DB:A5:67:84:5A:45 Certificate issuer: /CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Certificate serial: 010D0C9F4328584E48248CC2E157BDEB45AB3D80 Authority key identifier: 83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa Signing time: Wed 24 Jun 2026 21:00:12 +0000 ROA not before: Wed 24 Jun 2026 21:00:12 +0000 ROA not after: Tue 22 Sep 2026 21:00:12 +0000 asID: 6079 IP address blocks: 208.99.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:48:24:8c:c2:e1:57:bd:eb:45:ab:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd198da4-dbcc-4bec-a1a0-31d61d5ccc71 Validity Not Before: Jun 24 21:00:12 2026 GMT Not After : Sep 22 21:00:12 2026 GMT Subject: CN=96501962-86e4-4d21-83d6-af77d006d0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:9b:08:a3:20:6b:89:47:03:a0:c8:39:f3: cb:49:89:78:43:35:f8:61:a1:0e:b0:3d:e8:6e:49: a1:42:e6:1f:2d:cb:4b:7b:ba:73:24:15:b8:ec:72: 9d:bc:09:75:8a:c0:59:37:5e:18:b3:aa:9d:a3:8b: 99:0c:c3:5a:7a:35:16:59:ff:46:1b:dc:e5:e3:90: 8b:20:72:fb:3c:f1:b0:6f:09:bd:56:32:73:40:fa: 2b:2f:ff:1c:24:46:ea:c0:47:85:e7:ee:47:e9:d4: 4c:02:a9:bd:84:bd:82:a1:47:29:98:94:a3:d4:e9: c1:79:b5:1c:c6:18:c9:53:f6:14:36:5d:3d:52:68: e4:bf:82:a9:b9:c3:c6:cb:34:3a:ae:f6:a2:11:d0: a3:56:92:7f:f9:06:e0:05:90:7b:51:8d:86:b1:be: 20:f3:97:79:cf:c0:88:b9:b2:bf:d5:b6:99:e3:4b: 67:c7:61:42:ba:ec:0f:d8:bd:48:07:47:2c:2c:95: 59:a4:b4:b7:66:72:59:14:2d:ab:e2:f5:50:9d:16: 04:56:f8:60:40:75:6d:6f:94:ae:bf:ef:d6:e7:28: cd:2d:ef:21:8c:27:1a:d8:cb:73:ba:38:a2:a5:ac: 58:23:35:5f:74:8e:fd:c3:09:f9:1b:61:58:87:5e: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C4:0C:1A:AE:F1:E0:27:89:93:1E:08:FD:D3:DB:A5:67:84:5A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/c39cca32-f395-3fe4-84da-62da6b8d2a29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.crl X509v3 Authority Key Identifier: keyid:83:34:B9:70:BA:25:80:24:26:DF:15:AE:FB:C4:6C:D6:42:0B:68:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd198da4-dbcc-4bec-a1a0-31d61d5ccc71.cer sbgp-ipAddrBlock: critical IPv4: 208.99.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:be:a5:79:06:1e:2c:84:a5:b2:5d:e2:5c:26:50:89:fc:91: 7d:77:1e:48:49:48:f7:5e:5d:7c:90:55:3b:ea:34:4e:71:18: 6d:17:21:22:3b:28:0a:83:26:79:5b:11:89:a0:15:58:92:52: 9c:f5:f4:1c:6b:60:36:fb:df:85:25:3b:5b:14:5c:19:78:3e: 6a:db:ff:79:5a:b4:11:6e:0d:a7:31:3f:36:75:b1:9a:46:b6: 40:4e:0b:68:41:e9:f7:29:da:84:cb:cb:3c:8a:5e:ec:de:1c: f1:35:fa:eb:aa:c7:1e:94:14:fb:0e:e8:40:93:0e:fb:1a:84: a4:de:97:40:47:a0:d9:91:bf:b0:26:30:95:1f:8c:ba:0c:5a: 6d:1a:a4:37:f7:d8:08:7d:6d:a0:76:87:34:af:f3:e9:30:da: 24:67:c6:7e:65:2c:fa:08:10:5e:38:08:ec:05:30:c0:75:aa: 45:59:f7:c0:f6:6f:75:bc:50:08:92:9d:f9:59:c1:dd:6e:22: 28:ce:e1:2c:69:bd:5b:20:ce:ad:b8:14:ce:e9:b6:7a:44:e9: f0:e5:4b:11:01:69:ea:59:33:2a:46:07:71:24:7d:c5:e5:c9: 3e:f7:6b:13:ce:5a:43:32:5c:21:26:c8:91:75:cc:07:4f:d9: b5:b8:d2:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5IJIzC4Ve960WrPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxOThkYTQtZGJjYy00YmVjLWExYTAtMzFkNjFkNWNj YzcxMB4XDTI2MDYyNDIxMDAxMloXDTI2MDkyMjIxMDAxMlowLzEtMCsGA1UEAxMk OTY1MDE5NjItODZlNC00ZDIxLTgzZDYtYWY3N2QwMDZkMGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZSbCKMga4lHA6DIOfPLSYl4QzX4YaEOsD3o bkmhQuYfLctLe7pzJBW47HKdvAl1isBZN14Ys6qdo4uZDMNaejUWWf9GG9zl45CL IHL7PPGwbwm9VjJzQPorL/8cJEbqwEeF5+5H6dRMAqm9hL2CoUcpmJSj1OnBebUc xhjJU/YUNl09Umjkv4KpucPGyzQ6rvaiEdCjVpJ/+QbgBZB7UY2Gsb4g85d5z8CI ubK/1baZ40tnx2FCuuwP2L1IB0csLJVZpLS3ZnJZFC2r4vVQnRYEVvhgQHVtb5Su v+/W5yjNLe8hjCca2MtzujiipaxYIzVfdI79wwn5G2FYh16wTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDEDBqu8eAniZMeCP3T26VnhFpFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5 OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2MWQ1Y2NjNzEvYzM5Y2NhMzItZjM5NS0z ZmU0LTg0ZGEtNjJkYTZiOGQyYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxOThkYTQtZGJjYy00YmVjLWEx YTAtMzFkNjFkNWNjYzcxL2NkMTk4ZGE0LWRiY2MtNGJlYy1hMWEwLTMxZDYxZDVj Y2M3MS5jcmwwHwYDVR0jBBgwFoAUgzS5cLolgCQm3xWu+8Rs1kILaC4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDE5OGRhNC1kYmNjLTRiZWMtYTFhMC0zMWQ2 MWQ1Y2NjNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS+pXkGHiyEpbJd4lwmUIn8kX13HkhJSPdeXXyQVTvqNE5xGG0XISI7 KAqDJnlbEYmgFViSUpz19BxrYDb734UlO1sUXBl4Pmrb/3latBFuDacxPzZ1sZpG tkBOC2hB6fcp2oTLyzyKXuzeHPE1+uuqxx6UFPsO6ECTDvsahKTel0BHoNmRv7Am MJUfjLoMWm0apDf32Ah9baB2hzSv8+kw2iRnxn5lLPoIEF44COwFMMB1qkVZ98D2 b3W8UAiSnflZwd1uIijO4SxpvVsgzq24FM7ptnpE6fDlSxEBaepZMypGB3EkfcXl yT73axPOWkMyXCEmyJF1zAdP2bW40vc= -----END CERTIFICATE-----Generated at Sat Jul 18 02:31:11 2026 by rpki-client